Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2022-44543
Disclosure Date: December 12, 2023 (last updated December 15, 2023)
The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.
0
Attacker Value
Unknown
CVE-2023-25014
Disclosure Date: February 02, 2023 (last updated October 08, 2023)
An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.
0
Attacker Value
Unknown
CVE-2023-25013
Disclosure Date: February 02, 2023 (last updated October 08, 2023)
An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.
0
Attacker Value
Unknown
CVE-2021-36787
Disclosure Date: August 13, 2021 (last updated February 23, 2025)
The femanager extension before 5.5.1 and 6.x before 6.3.1 for TYPO3 allows XSS via a crafted SVG document.
0
Attacker Value
Unknown
CVE-2014-6292
Disclosure Date: October 03, 2014 (last updated October 05, 2023)
The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.
0
